Exploits

Remote Desktop Services Remote Code Execution Vulnerability

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuratio…

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over…

Microsoft Exchange Server Remote Code Execution Vulnerability

Argument Injection in PHP-CGI

Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows

Microsoft SharePoint Remote Code Execution Vulnerability

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, a…

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles ce…

Netlogon Elevation of Privilege Vulnerability

Windows SMB Remote Code Execution Vulnerability

.NET Framework Remote Code Execution Injection Vulnerability

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

LNK Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

Scripting Engine Memory Corruption Vulnerability

Indexed via Android Security Bulletin — full NVD metadata pending.

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMon…

Scripting Engine Memory Corruption Vulnerability

Scripting Engine Memory Corruption Vulnerability

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

Sudo before 1.9.17p1 allows local users to obtain root access

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the n…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.…

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams …

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Microsoft Exchange Validation Key Remote Code Execution Vulnerability

Microsoft Office Memory Corruption Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Windows SMB Information Disclosure Vulnerability

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2…

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests…

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE…

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed…

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products,…

Microsoft Office Remote Code Execution Vulnerability

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2…

Indexed via Android Security Bulletin — full NVD metadata pending.

Windows CryptoAPI Spoofing Vulnerability

.NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript…

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered i…

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attac…

Windows COM Elevation of Privilege Vulnerability

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of s…

Windows SMB Client Elevation of Privilege Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer,…

Microsoft Security Update Guide entry — NVD enrichira.

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S…